Summary

By completing this Hands-On Lab you have learned:

• how to externalize authentication, freeing your ASP.NET from the burden of credentials management and making your code independent from the authentication mechanisms & protocols established at deployment time.
• You also learned how to use claims for driving the behavior of your ASP.NET application, from simple experience customization to full authorization.
• [Optional] You have got a glimpse of how Windows Identity Foundation custom STS works, by inserting in the STS project an existing ASP.NET membership provider database
• Finally, you have learned how to call a backend service from the code behind of your web application by acting as the current user of the website

You can expect the activities in exercise 1 and exercise 3 to be the most common tasks you will perform in normal development practice: as you had a chance to experience, those are very simple steps and the benefits for your application are significant.

We hope that this lab helped you to learn how to benefit in your web applications from the powerful identity capabilities that Windows Identity Foundation offers to .NET developers: if you want to know more, we suggest to also go through the WCF hands-on lab in the Identity Developer Training Kit.